AZ-800 · Question #94
You need to allow a user to change the settings like email notifications within Azure AD Connect Health. Which of the following Roles would you provide to the user? (Choose the role with minimum…
The correct answer is B. Contributor. To allow a user to change settings like email notifications in Azure AD Connect Health, the Contributor role is the minimum privilege required.
Question
You need to allow a user to change the settings like email notifications within Azure AD Connect Health. Which of the following Roles would you provide to the user? (Choose the role with minimum privileges that suits the best and is sufficient for the given scenario)
Options
- AOwner
- BContributor
- CReader
- DWriter
How the community answered
(30 responses)- A3% (1)
- B93% (28)
- C3% (1)
Why each option
To allow a user to change settings like email notifications in Azure AD Connect Health, the Contributor role is the minimum privilege required.
The Owner role has full access to all resources, including the right to delegate roles, which is excessive for merely changing settings in Azure AD Connect Health.
The Contributor role provides full access to manage all resources but does not allow assigning roles in Azure, which is sufficient for modifying settings within Azure AD Connect Health. This role enables the user to perform actions like configuring email notifications and other service-specific settings.
The Reader role only allows viewing resources and their settings, preventing the user from making any changes, including email notification configurations.
Writer is not a standard Azure built-in role; typically, Contributor covers write operations.
Concept tested: Azure RBAC for Azure AD Connect Health
Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect-health-rbac
Topics
Community Discussion
No community discussion yet for this question.